Triade LLC is looking for a Application Security Architect
As a Security Architect, you'll lead the charge in fortifying our digital fortresses. Your focus will span from scrutinizing architectural blueprints to fortifying containerized environments. Here's a glimpse of your responsibilities:
- Architectural Fortification: Analyze software designs to pinpoint security vulnerabilities and propose robust defenses aligned with industry best practices.
- Risk Assessment Mastery: Conduct thorough Security Risk Assessments (SRA) to unearth potential weak spots, crafting enhancement strategies to bolster our security posture.
- Policy Crafting: Develop and uphold security protocols, ensuring our development and deployment practices adhere to stringent security standards.
- Container Security Leadership: Safeguard container orchestration platforms like OpenShift and steer container runtime environments using Podman and Docker.
- API Security Prowess: Implement and oversee API security solutions, leveraging your expertise with MuleSoft and Traceable to fortify our digital gateways.
- Open Source Vigilance: Integrate and manage open source security using NexusIQ, swiftly identifying and neutralizing vulnerabilities.
- Real-Time Protection Implementation: Install, configure, and maintain Runtime Application Self-Protection (RASP) solutions like Contrast Protect, bolstering our applications' real-time defense capabilities.
- SDLC Sentinel: Collaborate closely with development teams, embedding security considerations throughout the Software Development Lifecycle (SDLC).
- Educator Extraordinaire: Provide insightful security guidance and training, empowering teams to fortify their code and operations against potential threats.
- Security Savvy: Stay ahead of the curve on emerging threats, technologies, and regulations to ensure our defenses remain impregnable.
Qualifications:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related fields.
- Minimum 5 years of hands-on experience in application security, with a knack for risk assessment and architecture.
- Proficiency in securing container environments and managing container security.
- Expertise in API management and security, particularly with MuleSoft and Traceable.
- Mastery of open source security management, with proficiency in tools like NexusIQ.
- Experience implementing RASP solutions, ideally Contrast Protect.
- Deep understanding of secure coding practices, ethical hacking, and threat modeling.
- Familiarity with industry standards like OWASP, NIST, and ISO 27001.
- Security certifications such as CISSP, CEH, or OSCP are a plus.
- Stellar communication, analytical, and problem-solving skills.
Benefits:
- W2 employment status.
- 10 days of PTO and 10 federal holidays.
- PTO starts from the third month and is calculated proportionally, not accumulative.